Welcome to GeekPolice!

Our Appeal to YOU: Please join and help us grow this website. We truly love technology and security and we want to share it with the world. Recognize the excitement of technology here daily:☞Security Discussion on malware, ransomware, and much more!
☞24/7 hard- and software tech support (+mobile!)
☞Virus and malware removal support
☞Tons of tutorials, guides and solutions
☞The very finest of our voluntary Support Staff
☞Much, much more absolutely FREE of any charge!

Note to non-members: Guests are able to open topics and reply to posts; however, guests are not allowed to create their own profile, unless they register (which you can do so below). By registering, you unlock many more capabilities of this site, and are able to interact with other members including making friends! Who wouldn't love a friendly tech community? Join us now!

Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded, select "Perform Quick Scan", then click Scan.

The scan may take some time to finish,so please be patient.

When the scan is complete, click OK, then Show Results to view the results.

Make sure that everything is checked, and click Remove Selected.

When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)

The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.Click OK to either and let MBAM proceed with the disinfection process.If asked to restart the computer, please do so immediately.

1. If you are using Firefox, make sure that your download settings are as follows:

* Tools->Options->Main tab * Set to "Always ask me where to Save the files".

2. During the download, rename Combofix to svchost as follows:

3. It is important you rename Combofix during the download, but not after.4. Please do not rename Combofix to other names, but only to the one indicated.5. Close any open browsers.6. We need to disable your local AV (Anti-virus) before running Combofix.

See HERE for how to disable your AV.

Double click on svchost.exe.

Follow the prompts. NOTE:

Allow combofix to run

Post C:\combofix.txt back here.

Note:Do not mouse click combofix's window whilst it's running. That may cause it to stall.

Infected copy of c:\windows\explorer.exe was found and disinfected Restored copy from - c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

Infected copy of c:\windows\System32\wininit.exe was found and disinfected Restored copy from - c:\windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

Infected copy of c:\windows\explorer.exe was found and disinfected Restored copy from - c:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe.((((((((((((((((((((((((( Files Created from 2010-09-14 to 2010-10-14 ))))))))))))))))))))))))))))))).

[HKEY_USERS\S-1-5-21-3149184285-3503970553-1301722407-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]"??"=hex:10,0a,5d,09,a9,35,49,0b,3a,be,47,96,98,a2,f7,1b,d9,9b,72,be,26,00,46, f0,27,40,a8,3c,6e,7c,1e,45,00,d5,50,c9,97,84,47,cf,ef,7a,46,17,dc,00,77,06,\"??"=hex:bd,24,d4,09,d2,ac,2a,80,43,1b,e0,96,93,b0,c6,2e